Categories: Malware

How to remove “Midie.106641”?

The Midie.106641 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Midie.106641 virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Performs HTTP requests potentially not found in PCAP.
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Uses Windows utilities for basic functionality
CAPE detected the OnlyLogger malware family
Attempts to modify proxy settings
Deletes executed files from disk
Uses suspicious command line tools or Windows utilities

How to determine Midie.106641?


File Info:
name: BD97B9BDB9E842A76D08.mlwpath: /opt/CAPEv2/storage/binaries/c739d1ae35aa6c63fb6f07b529bd25f77aad42260ed8a95a69487216fbb2b718crc32: 7C523B1Dmd5: bd97b9bdb9e842a76d084d9aae2157dcsha1: 05855bb520005e4105f053d40c464cb8c7b2f2d0sha256: c739d1ae35aa6c63fb6f07b529bd25f77aad42260ed8a95a69487216fbb2b718sha512: 3e5112f757f7e54399b14d4a00c695a1268f1cf4534db95fa3e7529c437add41b4cf5429747635c16d8fbe1c0123e4522a8b08867ede9de3b5c73b75987a2c32ssdeep: 6144:os5wCYvpX57HjBi7g9dO1KIaDm18r7ITsq:oSJYvD7v9kqr7type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1D974E0C13282F772C85638308825CFA59AFEBC71E5B1850B7775A77E6E602C1CA76319sha3_384: 2726a7336085893eb58570f6ba9cbd1660c6eff5c0dac2d4f4aa8dcc6a52b721b9004688c22648994de1fb73c6f3f3dfep_bytes: e8ec660000e978feffffcccccccccccctimestamp: 2020-08-26 13:39:37
Version Info:
InternationalName: bomgvioci.iwaCopyright: Copyrighz (C) 2021, fudkortProjectVersion: 3.10.70.57Translation: 0x0129 0x07b2

Midie.106641 also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.Agent.trXt
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Midie.106641
ClamAV	Win.Malware.Tofsee-9936819-1
FireEye	Generic.mg.bd97b9bdb9e842a7
CAT-QuickHeal	Ransom.StopcryptRI.S26308103
ALYac	Gen:Variant.Midie.106641
Cylance	Unsafe
VIPRE	Gen:Variant.Midie.106641
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 003e58dd1 )
K7GW	Trojan ( 0058d3201 )
CrowdStrike	win/malicious_confidence_100% (W)
Cyren	W32/Qbot.FK.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.HOAM
APEX	Malicious
Paloalto	generic.ml
Cynet	Malicious (score: 100)
Kaspersky	HEUR:Exploit.Win32.Shellcode.gen
BitDefender	Gen:Variant.Midie.106641
SUPERAntiSpyware	Trojan.Agent/Gen-Crypt
Avast	Win32:AceCrypter-B [Cryp]
Tencent	Trojan-ransom.Win32.Stop.16000284
Ad-Aware	Gen:Variant.Midie.106641
Emsisoft	Trojan.Crypt (A)
F-Secure	Trojan.TR/Crypt.Agent.oirzb
DrWeb	Trojan.PWS.Vidar.19
Zillya	Trojan.Kryptik.Win32.3676352
McAfee-GW-Edition	Packed-GDT!BD97B9BDB9E8
Trapmine	suspicious.low.ml.score
Sophos	Mal/Generic-S + Mal/Agent-AWV
SentinelOne	Static AI – Suspicious PE
GData	Win32.Trojan.BSE.1RR0I6
Jiangmin	Exploit.ShellCode.ggf
Avira	TR/Crypt.Agent.oirzb
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Win32.SGeneric
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Arcabit	Trojan.Midie.D1A091
ZoneAlarm	HEUR:Exploit.Win32.Shellcode.gen
Microsoft	Ransom:Win32/StopCrypt.PAO!MTB
Google	Detected
AhnLab-V3	Trojan/Win.MalPE.R466050
Acronis	suspicious
McAfee	Packed-GDT!BD97B9BDB9E8
VBA32	BScope.TrojanSpy.Stealer
Malwarebytes	Trojan.MalPack.GS
Rising	Trojan.Kryptik!1.DB29 (CLASSIC)
Ikarus	Trojan.Win32.Raccoon
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/GenericKDZ.6DF1!tr
BitDefenderTheta	Gen:NN.ZexaF.34606.wqW@aSzu2kle
AVG	Win32:AceCrypter-B [Cryp]
Panda	Trj/GdSda.A